DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hgfrd
Static task
static1
Behavioral task
behavioral1
Sample
83bec48d32c9b9b480696c9c7b52c0ae_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83bec48d32c9b9b480696c9c7b52c0ae_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
83bec48d32c9b9b480696c9c7b52c0ae_JaffaCakes118
Size
220KB
MD5
83bec48d32c9b9b480696c9c7b52c0ae
SHA1
ccbec6b799f0070e8c617ad72dd1cd28ee4bf26d
SHA256
0281508886b4b78864ac720114ee4de6661ff72517513e4879820ef50c461170
SHA512
c1470fbfc30c8b0d0cec804e94d5ae6f1ed40158e9f79779caef96d6a8d8ff1dc9719e739ca6d6df5479940275d2676adb4eb859511e24bffc2d6b462a80dbf1
SSDEEP
3072:9fq282ufq282ufq282ufq282ufq282ufq282ufq282:9fqT/fqT/fqT/fqT/fqT/fqT/fqT
Checks for missing Authenticode signature.
resource |
---|
83bec48d32c9b9b480696c9c7b52c0ae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hgfrd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ